Reputation
241
Top tag
Next privilege 250 Rep.
View close votes
Badges
5 13
Impact
~14k people reached

  • 0 posts edited
  • 0 helpful flags
  • 29 votes cast
May
19
awarded  Scholar
May
19
accepted Security effects of granting guest access to a database
May
18
awarded  Student
May
18
comment Security effects of granting guest access to a database
I'm actually asking about the default behavior you get when you database in enterprise manager. It seems to always have dbo, guest and public listed and users and roles. However, I've never been able to leverage guest and public to hack into anything as you seem to suggest is possible.
May
18
comment Security effects of granting guest access to a database
In enterprise manager, guest is listed as a user via group membership. EM reports the user doesn't exist when you try to drop it. It is not listed as a member of public. It has no explicit rights on any object. It hasn't been added as an explicit member of any role. Was the public role and guest account created just to create the illusion of complete and utter anonymous access without actually doing so?
May
18
asked Security effects of granting guest access to a database
May
9
awarded  Autobiographer
May
9
awarded  Supporter